[checkmk-commits] [tribe29/checkmk] a45d93: 14871 SEC Windows agent's ProgramData directory is...

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: a45d934b12c67b0f94698431a1e32d4fc28bf3a9 https://github.com/tribe29/checkmk/commit/a45d934b12c67b0f94698431a1e32d4fc… Author: Sergey Kipnis <sergey.kipnis(a)tribe29.com> Date: 2022-10-14 (Fri, 14 Oct 2022) Changed paths: A .werks/14871 M agents/wnx/src/engine/cma_core.cpp Log Message: ----------- 14871 SEC Windows agent's ProgramData directory is accessible only with admins permissions Previous to this Werk every authenticated Windows user could read some sensitive data from the Windows agent working directory. To prevent issues with leaking sensitive data we restrict the permission to read data of the Windows agent. CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/…) Change-Id: Ie8ffb02d53df05d6873bf7bac50221760ff842cf Commit: 173216675adda7fc259dc93bbc970945e4217c57 https://github.com/tribe29/checkmk/commit/173216675adda7fc259dc93bbc970945e… Author: Lars Michelsen <lm(a)tribe29.com> Date: 2022-10-14 (Fri, 14 Oct 2022) Changed paths: M tests/.gitignore M tests/Makefile Log Message: ----------- Fix broken cycles test Seems the command line API has changed and we did not update our call site. Just unbreak the job, not trying to improve the robustness of the call site. Sadly we have moved from 13 to 14 cycles in the meantime. We will have to figure out how to clean that up again next. Change-Id: Icc67d879692b6894cdf4706bc72281285a9dd576 Compare: https://github.com/tribe29/checkmk/compare/703e75766442...173216675add